hettich[.]com[.]gt[.]innovate[.]gt

PhishDestroy identifies hettich.com.gt.innovate.gt as a credential harvesting domain currently under active investigation for phishing activities. The domain poses as Hettich, a well-known hardware manufacturer, to deceive users into disclosing sensitive login credentials. This domain is currently active and flagged by PhishDestroy’s automated systems as a high-risk threat vector requiring immediate scrutiny.

This domain resolves to IP 69.174.48.72 and currently shows no detections on VirusTotal, with 3 of 95 vendors flagging it as malicious. The domain is secured with a Let's Encrypt SSL certificate, which may contribute to a false sense of legitimacy. While specific registration details such as registrar name, creation date, and blocklist participation are not provided in this dataset, the absence of detections should not be interpreted as a sign of safety. The domain’s structure and naming convention are designed to mimic legitimate subdomains of Hettich, increasing the likelihood of user deception.

As of the latest assessment, hettich.com.gt.innovate.gt remains flagged as an active credential harvesting threat under investigation. Users are strongly advised to avoid interacting with this domain or entering any personal, financial, or login information. Organizations should consider blocking this domain and its associated IP at the network level to prevent exposure. If any credentials have been entered, users should immediately reset passwords and monitor accounts for unauthorized access. Report the domain to relevant cybersecurity teams or platforms such as VirusTotal for further analysis and containment.